Keeping your data from Apple is harder than expected
鈥Privacy. That's Apple,鈥 the slogan proclaims. New research from Aalto University begs to differ.
Study after study has shown how voluntary third-party apps erode people's privacy. Now, for the first time, researchers at Aalto University have investigated the privacy settings of Apple鈥檚 default apps; the ones that are pretty much unavoidable on a new device, be it a computer, tablet or mobile phone. The researchers will present their findings in mid-May at the prestigious CHI conference, and the peer-reviewed research paper is already available .
鈥榃e focused on apps that are an integral part of the platform and ecosystem. These apps are glued to the platform, and getting rid of them is virtually impossible,鈥 says Associate Professor Janne Lindqvist, head of the computer science department at Aalto.
The researchers studied eight apps: Safari, Siri, Family Sharing, iMessage, FaceTime, Location Services, Find My and Touch ID. They collected all publicly available privacy-related information on these apps, from technical documentation to privacy policies and user manuals.
The fragility of the privacy protections surprised even the researchers.
鈥楧ue to the way the user interface is designed, users don鈥檛 know what is going on. For example, the user is given the option to enable or not enable Siri, Apple's virtual assistant. But enabling only refers to whether you use Siri's voice control. Siri collects data in the background from other apps you use, regardless of your choice, unless you understand how to go into the settings and specifically change that,鈥 says Lindqvist.
Participants weren鈥檛 able to stop data sharing in any of the apps
In practice, protecting privacy on an Apple device requires persistent and expert clicking on each app individually. Apple's help falls short.
鈥楾he online instructions for restricting data access are very complex and confusing, and the steps required are scattered in different places. There鈥檚 no clear direction on whether to go to the app settings, the central settings 鈥 or even both,鈥 says Amel Bourdoucen, a doctoral researcher at Aalto.
In addition, the instructions didn鈥檛 list all the necessary steps or explain how collected data is processed.
The researchers also demonstrated these problems experimentally. They interviewed users and asked them to try changing the settings.
鈥業t turned out that the participants weren鈥檛 able to prevent any of the apps from sharing their data with other applications or the service provider,鈥 Bourdoucen says.
Finding and adjusting privacy settings also took a lot of time. 鈥榃hen making adjustments, users don't get feedback on whether they鈥檝e succeeded. They then get lost along the way, go backwards in the process and scroll randomly, not knowing if they've done enough,鈥 Bourdoucen says.
In the end, Bourdoucen explains, the participants were able to take one or two steps in the right direction, but none succeeded in following the whole procedure to protect their privacy.
Running out of options
If preventing data sharing is difficult, what does Apple do with all that data?
It鈥檚 not possible to be sure based on public documents, but Lindqvist says it鈥檚 possible to conclude that the data will be used to train the artificial intelligence system behind Siri and to provide personalised user experiences, among other things.
Many users are used to seamless multi-device interaction, which makes it difficult to move back to a time of more limited data sharing. However, Apple could inform users much more clearly than it does today, says Lindqvist. The study lists a number of detailed suggestions to clarify privacy settings and improve guidelines.
For individual apps, Lindqvist says that the problem can be solved to some extent by opting for a third-party service. For example, some participants in the study had switched from Safari to Firefox.
Lindqvist can鈥檛 comment directly on how Google's Android works in similar respects, as no one has yet done a similar mapping of its apps. But past research on third-party apps does not suggest that Google is any more privacy-conscious than Apple.
So what can be learned from all this 鈥 are users ultimately facing an almost impossible task?
鈥楿nfortunately, that's one lesson,鈥 says Lindqvist.
Read more news
Samu Taulu develops next-generation brain imaging methods
Associate Professor of neurostimulation and neuroimaging Samu Taulu develops more precise methods for understanding the brain
EAA Best Paper and Presentation Award for Young Researchers for postdoctoral researcher Thomas Deppisch
The awarded work shows how speech can be made clearer in noisy environments while still preserving directional cues
Professor Hanna Maylett: 鈥淲ithout time spent together, a shared vision cannot emerge鈥
According to Hanna Maylett, associate professor of film directing, a director doesn鈥檛 need to know all the answers; rather, their role is to create a process through which those answers can be discovered together.